Skip to content

We use Umami, our own cookie-free analytics tool, to see which pages are read. We only turn it on if you accept. There is more information in the cookie policy.

Privacy policy

Last updated:

This is a translation for convenience. If there is any discrepancy, the Spanish version prevails.

This policy explains what personal data we process when you visit referentsoftware.com or write to us, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD). The data of clients and suppliers is also governed by the contract we sign with each of them.

Controller

  • Controller: REFERENT SOFTWARE SL
  • Tax ID (NIF): B93952711
  • Address: Ctra. Matanza, 6, 42330 San Esteban de Gormaz (Soria), Spain
  • Data protection email: hello@referentsoftware.com

What data we process, why, and on what basis

We receive all data directly from you or from your browser. We do not buy databases or combine your data with data from other sources.

If you write to us through the form or by email

  • Data: name, work email, organization, organization type, your message, the language of the page and the date and time you tick the privacy box, which we keep as proof of your consent. If you write to us by email, the data you include in it.
  • Purpose: to answer your enquiry and, if you ask us to, prepare a proposal.
  • Legal basis: on the form, your consent, given by ticking the box (article 6.1.a GDPR); by email, our legitimate interest in replying to those who write to us (article 6.1.f). When you ask us for a proposal, also taking steps at your request before entering into a contract (article 6.1.b). You can withdraw your consent at any time, without affecting processing carried out before.
  • Required fields: the form fields are needed for us to reply.

We do not use this data to send you marketing communications.

If you accept usage statistics

  • Data: pages visited, referring page, browser, operating system, device type, screen size, language and approximate country. We do not use cookies or store your IP address: visits are grouped with a pseudonymous identifier that is calculated from the IP address and the browser, changes every month and is not stored in your browser.
  • Tool: Umami, an open-source analytics tool that we run ourselves on our own server. The data is not shared with any analytics or advertising company.
  • Purpose: to understand which content is read and to improve the website, always with aggregated data.
  • Legal basis: your consent, given by pressing “Accept” in the statistics notice (article 6.1.a GDPR and article 22.2 LSSI-CE). Until you accept, the statistics script is not loaded.
  • How to withdraw it: at any time, with a button in the cookie policy, which is linked at the bottom of every page. If your browser sends the Global Privacy Control or “Do Not Track” signal and you have not made a choice, we take it that you reject statistics.

Security and operation of the website

  • Data: IP address and technical data of each request (date and time, requested page, browser).
  • Purpose: to serve the website, protect it against abuse and attacks, and fix errors.
  • Legal basis: our legitimate interest in keeping the website secure and available (article 6.1.f GDPR).

We do not make automated decisions or build profiles with this data.

How long we keep it

  • Enquiries through the form or by email: if no business relationship follows, 12 months from our last communication; after that, we delete them. If one does, for as long as it lasts and then for the limitation period of any possible liabilities. During that time the data is blocked, as provided in article 32 LOPDGDD, and then deleted.
  • Usage statistics: 24 months.
  • Technical and security logs: up to 7 days.

Who else has access to the data

We do not sell or share your data with third parties, except when a law requires us to disclose it to an authority. For the website to work, these providers process it on our behalf (processors), under a contract that requires them to protect it and to use it only for what we ask:

  • Cloudflare, Inc. (United States): hosts and serves the website, protects it against attacks, connects to the statistics server and delivers the form messages to us by email (Cloudflare Email Service).
  • Google Ireland Limited (Ireland): provides the Google Workspace email service where we receive and store the messages.
  • Hetzner Online GmbH (Germany): hosts the Umami server, where the statistics are stored, in its Nuremberg data centre.

Cloudflare, and Google when it processes data from the United States, carry out international data transfers. They are covered by the EU-U.S. Data Privacy Framework, to which Cloudflare, Inc. and Google LLC have self-certified, and by the standard contractual clauses approved by the European Commission. You can ask us for a copy of these safeguards at hello@referentsoftware.com.

Your rights

You can ask us at any time for:

  • Access: to know what data of yours we process.
  • Rectification: to correct it if it is inaccurate or incomplete.
  • Erasure: to delete it when it is no longer needed.
  • Objection: to stop processing it when the basis is our legitimate interest.
  • Restriction: to keep it without using it, for example while a complaint is resolved.
  • Portability: to receive the data you gave us in a structured, commonly used format.
  • Withdrawal of your consent, without affecting processing carried out before. For statistics, just use the button in the cookie policy.

Write to hello@referentsoftware.com with the subject “Data protection”, stating which right you want to exercise. If we have reasonable doubts about your identity, we may ask you to prove it. We reply within one month, which may be extended by two further months in complex cases, as provided in the GDPR. Exercising your rights is free of charge.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid, Spain; aepd.es).

Security

The website is always served encrypted (HTTPS). The form does not store messages on the website: it sends them by email, and only the people at REFERENT SOFTWARE SL who handle enquiries can access them. We apply technical and organizational measures appropriate to the risk to prevent their loss, alteration or unauthorized access.

Minors

The website is aimed at companies and public administrations. We do not knowingly collect data from children under 14; if we receive any, we delete it.

Changes to this policy

If we change how we process data, we will update this page and its date. If the change is significant, we will say so visibly on the website.

Back to home